Privacy policy
Data controller
LUMICA CENTER MARBELLA, S.L., tax ID B-22712582, Av. Ricardo Soriano, 72, P-1, 2A, 29601 Marbella, Málaga. Email: info@lumicacenter.com. Phone: +34 628 137 983.
What data we process
Browsing and analytics data from this website, only if you accept analytics cookies.
Data you give us when you contact us by email, phone or WhatsApp.
Booking data at citas.lumicacenter.com: full name, phone, email and, optionally, an identity document. If the appointment is for a child, the child's name and date of birth, provided by their parent or guardian.
Health data needed to provide care. It is processed at the centre and is also covered by the informed consent the patient signs at the clinic.
Your email and name, if you subscribe to our newsletter.
Purposes and legal basis
Managing your appointments and answering your questions: performance of the care relationship or of steps taken at your request (art. 6.1.b GDPR).
Providing healthcare and keeping the clinical record: art. 9.2.h GDPR and Spanish Law 41/2002 on patient autonomy.
Meeting legal obligations, such as tax and accounting: art. 6.1.c GDPR.
Sending the newsletter and measuring website use: your consent (art. 6.1.a GDPR), which you can withdraw at any time.
How long we keep data
Clinical records are kept for at least five years from the discharge date of each episode of care, as required by Law 41/2002, or longer where the applicable rules require it.
Administrative and billing data are kept for the periods required by tax and commercial law.
Newsletter data are kept until you unsubscribe, and analytics data for a maximum of 14 months.
Recipients and processors
We do not share your data with third parties unless the law requires it.
To provide our services we use technology providers that process data on our behalf as data processors: website and booking system hosting (Cloudflare), the centre's management system database (Supabase), calendar and web analytics (Google), newsletter (Mailchimp) and management support software.
Some of these providers may process data outside the European Economic Area. Where they do, they apply the safeguards set out in the GDPR, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to info@lumicacenter.com or to our postal address, stating the right you are exercising and proving your identity.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Children
Data of children under 14 are provided and managed by their parents or legal guardians.
Security
We apply appropriate technical and organisational measures to protect your data, especially health data, against unauthorised access, loss or alteration.